Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: 10TAMOpDfYur5usrPkmqWLHCax/rseZcspYAmwXBj9I=
Subject key identifier: 22:BE:F5:73:B2:71:17:12:B5:33:20:D3:B5:4C:25:9E:E8:94:02:22
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 019D37F6F97D43F0F42AE0501ABE50A02B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:25 +0000
Manifest this update: Sun 29 Mar 2026 05:00:25 +0000
Manifest next update: Mon 30 Mar 2026 05:00:25 +0000
Files and hashes: 1: 4rWRMTAx37_lQCzr5hcZsju6dqw.roa (hash: W2xQvjb4BYluc6hJ83tM86YR+fMCZk+Sc0Dq669prBQ=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: MXyFt7Z2TDxHUPFpG0D/rIg/oUfexP2J+/l4vBZOmGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f9:7d:43:f0:f4:2a:e0:50:1a:be:50:a0:2b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Mar 29 05:00:25 2026 GMT
Not After : Mar 30 05:00:25 2026 GMT
Subject: CN=22bef573b2711712b53320d3b54c259ee8940222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:b5:47:8e:a0:ed:f4:3c:5a:0a:6d:ab:78:
a8:90:a1:57:a1:16:01:e8:43:b2:7a:db:e9:24:6c:
ba:ea:d4:30:2c:2b:2e:43:c4:3d:ed:de:47:74:d5:
ad:fa:e1:bc:3d:85:06:0a:ef:69:aa:88:20:d0:1a:
e0:2a:0a:5e:68:98:69:3c:7b:7c:5f:1c:4f:25:c2:
c7:c7:bb:18:a9:45:1b:ea:35:90:1c:7c:4a:f8:9c:
3a:91:05:89:14:d9:8e:cd:ee:98:2d:07:a4:5b:c4:
c6:ef:59:48:df:ac:b4:57:82:35:82:c2:9e:d7:f2:
41:27:e4:76:b1:10:27:d8:67:33:90:b9:1f:76:88:
e7:2d:75:36:bd:ed:c1:b2:8f:06:45:ef:e9:f1:72:
2c:3f:91:af:09:ed:27:1f:dd:37:d8:14:32:46:8b:
b8:01:37:bf:85:4e:38:d6:6b:f5:53:95:31:a1:d3:
5a:40:10:ef:36:d0:93:68:ab:a2:54:ca:fa:39:e0:
17:a2:da:95:36:7c:c7:8c:22:04:93:d6:77:68:80:
18:1b:6f:03:24:e8:e2:43:a8:c2:f4:8c:8d:19:b6:
8e:9c:28:43:39:db:21:a0:18:4f:ce:b1:35:79:0a:
47:12:75:4d:98:fe:ec:04:e6:96:b0:7f:10:d8:0a:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BE:F5:73:B2:71:17:12:B5:33:20:D3:B5:4C:25:9E:E8:94:02:22
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fc:e2:27:b3:8d:a7:9d:af:74:b5:37:97:be:57:a9:55:64:
26:82:6b:a2:e0:55:7b:45:c9:d2:ee:e2:a3:7d:a9:1e:6a:92:
85:43:58:93:de:fd:c7:07:cd:97:c7:e7:f0:ea:b0:11:72:b8:
70:32:c7:f4:7b:60:71:33:b6:98:9f:19:dd:83:ad:f8:6d:71:
46:50:55:9b:b7:8d:7e:fe:84:e5:d8:bf:20:c7:ab:61:5e:5c:
26:78:9b:05:1d:1b:4e:25:77:e7:ff:10:e2:5f:6d:49:bb:10:
b9:38:4f:aa:ba:c9:41:16:41:03:4c:38:ce:9c:b4:e8:b8:3a:
66:60:ca:6d:67:fd:bc:82:c2:89:86:d4:3c:44:51:8d:03:d6:
29:ee:b2:74:0c:7e:a6:a6:c5:44:5a:68:a5:c8:51:5a:c9:ce:
38:22:27:42:14:50:86:99:e3:bb:82:f5:bd:fd:45:5f:0f:85:
a4:17:9e:09:96:ed:c6:7d:70:c5:a9:f0:09:52:58:16:32:da:
93:13:97:74:7a:8a:d0:57:2e:29:53:c3:63:3e:bd:37:40:67:
a2:42:55:a5:1b:55:0f:a3:f9:b7:57:27:56:30:c3:08:07:01:
57:d3:ae:3f:02:b6:4e:ac:7b:dd:d8:42:96:fa:f0:42:0a:a0:
47:ff:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:48 2026 by rpki-client